Most sites limit certain privileges to specialized users and administrators, for example, CREATE and DROP USER, or CREATE and DROP DATABASE statements. You can monitor use of the GRANT statement with those privileges to make sure unauthorized users do not receive them.
BEGIN LOGGING WITH TEXT ON EACH USER, DATABASE, GRANT ;