Similar to how we expose is_admin when
using the user API as an admin,
provide is_auditor field

Changelog: changed

Add changelog entry