Audit log for impersonate user

[Benedikt Machens]

From a privacy security perspective it would be good if the usage of "impersonate user" will be tracking in the audit log

Initial some privacy sensitive company would like to turn this feature "on/off", but tracking who uses this feature could be a good step