state argued that since the audit logs were disabled there’s no way to prove that anybody actually used the publicly known unencrypted passwords.
Who disabled the audit logs, when, and why?