Comment # 13 on bug 860778 from Tony Jones

(In reply to Marcus Meissner from comment #12)
> actually the id was to start auditd to catch those entries so that they do
> not go to your console. (It is in the audit RPM which you probably
> deinstalled)
> 
> systemctl start auditd
> 
> also the messages should be caught by journald or other syslog methods so
> that they do not get printed on the console.
> 
> systemctl status systemd-journald
> 
> if not running, enabled and start it.

thanks Marcus.

my understanding is that what services are started by default (systemd) is
maintained by a meta package and is not under the control of the package
itself,  so there isn't much I can do from the audit side.