Enabling User Anonymization for Audit