auditing problems

I'm not sure why the horrible auditing problems are less horrible
when one is doing all the dependency work manually rather than
automatically -- I would have assumed the reverse.  I'm not about
to rebuild my whole system every time a new security patch gets
issued -- something new would break in the build every time.