We only create audit event when user is created by an authorized user,
but not via system trigger (e.g. SmartCard authentication).