typo in audit.rules manpage