A few years ago, we changed the logging subsystem to translate LF to CR LF, so that system log output could be viewed easily on Windows with applications that only understood CR LF as newlines.
Unfortunately, this also had the effect of changing the audit BSON output, since it uses the same logging subsystem.