audit: fix uninitialized variable in audit_add_rule()