Implement file access monitoring

[mike-myers-tob]

This should be scoped appropriately to avoid performance overhead. The goals are integrity monitoring (example: nobody should be altering this specific security policy configuration file), and access auditing / lightweight Data Loss Prevention (for examples: assume there's a file with stored AWS credentials, watch to make sure nobody is looking at it that shouldn't be).