They're showing up in the audit journal. Type AF (Authority Failure), violation type K (Special authority violation), object name *INSTR.
From: Monnier, Gary [mailto:Gary.Monnier@xxxxxxxxx]
Sent: Thursday, September 10, 2015 2:25 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: RE: Tracking down "Special authority violation"
What message ID you are looking at?