Streamed audit events now include a new
HTTP header to allow event consumers to validate
the event origin.

Changelog: added