Audit trail logs activation and de-activation

One of my customers requirements change regarding Audit Trail: it's required that If an Audit trail can be turned off by anyone, then it should be detectable.

Right now, turning off an Audit trail requires a system restart which is highly detectable but that will not be acceptable for much longer.