Immutable auditd rules are now configurable.

Moved the rules into a template, and added a module level config value
for whether rules are immutable. If true, a '-e' line is included at
the end of the config file.
Correcting a handful of syntax errors.
ida-486: Flag to panic the machine on audit failure.

Default to false. Also cleaned up some whitespace.