In audited 3.0.0, there is this change:

https://github.com/collectiveidea/audited/commit/ec4732fa214ad9e7c129c36acef1ca80779d079c

It adds audited column automatically as attr_protected, which means, that even with whitelist_attributes = false,
the models start being checked.

The solution: set whitelist_attirbutes to true and fix all the missing models with attr_accesible. I know at least
about Oranization, Location, Operatingsystem and ComputeResource that have this issue.

Note: right now, Gemfile locks the audited gem on rc1, which doesn't contain this change. Since the 3.0.0 is already
out, there should be no reason to keep that locked, and we should fix our code base instead.