Audit entries are secured by the permissions placed on the default instance security list of their class.
You must be the object store administrator with full control access to configure items for auditing. Audit entries have an ownership property, but the property is not set by default.