Should support audit logging for both acl updates on the template as well as updates to groups.