pfSense

rc.expireaccounts doesn't check to see whether or not an account has already been disabled when it runs. So if you have an expired user account, every hour it logs a config change "Expired X user accounts". It should only expire accounts that haven't already been disabled to avoid unnecessary log spam, and leaving the config history useless being full of changes that don't actually change anything.