Frequent admin privilege escalations on supervisor

We just installed a new FSM virtual appliance cluster on 7.4.2. In the raw events we are seeing a high frequency stream of Generic_Unix_Successful_Switch_User events coming from the Supervisor node.

They don’t seem to correspond to any real user activity and the sequence begins right after the Supervisor was fully initialized. I assume it’s associated with some automated or scheduled FSM process, but we haven’t been able to identify crons or anything similar responsible for this.

Is this normal for the supervisor in 7.4.2? What is the source of these events?