audit: use memset instead of trying to initialize field by field