[syslog-ng] root logout is not tracked by syslog-ng