Add tests for Audit::SyscallRuleData