The reason to install fswatch is to change the mode of files(when they change the file name or the files are new.).And it should be compulsory to monitor the data(not configure by any user).By the way audit.The secure audit mechanism should be compulsory,too.