SyslogFacility should be "AUTHPRIV" on rhel and derivates

[rene-ww]

SyslogFacility is static, but should really be based on the default values of the distros, because otherwise /var/log/secure with the default rhel rsyslogd config doesn't work as expected. This might cause confusion for users and issues with other preconfigured packages.

I'm totally aware that rsyslog is kind of deprecated, but nonetheless it's still used widely and honoring distro defaults is always a good thing :)