Auditing moderator/admin activity associated with user data

Given the possibility (at least for an admin) to backup/restore, which allows for inspecting the database and erasing any traces offline, an audit will never give you a complete picture and maybe even a false sense of security.