Since domain controllers are supposed to have unconstrained delegation set, I think it would be valuable to display domain controllers without it in audit mode.