Make Database log entry secured by configuration setup.
For regulated industry / pharma company database log retention is very important.
I request a setup scenario where it is not possible to delete DB log records, bering setup and registrations, unless the system is in maintenance mode.
Today it is possible, with the right permission to delete entry in db log. This can not be restricted in any way. Sysadmin will always be able to do this. This is not a good thing when gating audit (GXP or other regulations).