It's more than just the ability to audit, it's the ability to fix specific problems so you can focus on your business requirements. This happened to me recentl

It's more than just the ability to audit, it's the ability to fix specific problems so you can focus on your business requirements. This happened to me recently -- I was using Apache in a rather unusual reverse proxy configuration and was unable to suppress (using the usual directives) certain headers which were causing problems upstream. I could have spent a long time researching other solutions or coming up with clean workarounds but at the end of the day it was quick and effective to simply edit mod_proxy_http.c and fix the problem directly. Now that the service is up again, I have time to come up with better solutions if I desire. When our closed systems misbehave, my only option is to shrug and ask if we have a support contract.