Why should audit logging be configured for sensitive Kubernetes API operations?

1. To make all logs safe for public release
2. To record attributable administrative and data-access activity
3. To replace RBAC decisions
4. To block every unwanted packet automatically