pub fn parse_audit_log( reader: impl BufRead, only_files: &HashSet<PathBuf>, ) -> Result<Vec<AuditEntry>>