We are in the process of removing STI out of `audit_events` table and
this is the first step. We also instructs Rails AR not to type cast
objects to `SecurityEvent` anymore.