Andy said:

I do think it's more likely to be something missing on the broken
one that results in the file never being created, as opposed to
something deleting the file.

A couple of recent-ish updates needed restarts. Looking at the logs from auditd says, yep, the file is never created for some reason. 

Ian