Sorry, the penultimate paragraph above is probably wrong, since auth.log would normally exist at boot time, with mode 640.
Sorry, the penultimate paragraph above is probably wrong, since auth.log would normally exist at boot time, with mode 640.