Add template for audit.rules. NEEDS DOCUMENTATION