Rules are added for auditing changes to system time done via ``stime``.