docs: def _get_audit_defaults(option=None):
      '''
      Loads audit.csv defaults into a dict in __context__ called
      'lgpo.audit_defaults'. The dictionary includes fieldnames and all
      configurable policies as keys. The values are used to create/modify the
      ``audit.csv`` file. The first entry is `fieldnames` used to create the
      header for the csv file. The rest of the entries are the audit policy names.
      Sample data follows:
  
      {
          'fieldnames': ['Machine Name',
                         'Policy Target',
                         'Subcategory',
                         'Subcategory GUID',
                         'Inclusion Setting',
                         'Exclusion Setting',
                         'Setting Value'],
          'Audit Sensitive Privilege Use': {'Auditpol Name': 'Sensitive Privilege Use',
                                            'Exclusion Setting': '',
                                            'Inclusion Setting': 'No Auditing',
                                            'Machine Name': 'WIN-8FGT3E045SE',
                                            'Policy Target': 'System',
                                            'Setting Value': '0',
                                            'Subcategory': u'Audit Sensitive Privilege Use',
                                            'Subcategory GUID': '{0CCE9228-69AE-11D9-BED3-505054503030}'},
          'Audit Special Logon': {'Auditpol Name': 'Special Logon',
                                  'Exclusion Setting': '',
                                  'Inclusion Setting': 'No Auditing',
                                  'Machine Name': 'WIN-8FGT3E045SE',
                                  'Policy Target': 'System',
                                  'Setting Value': '0',
                                  'Subcategory': u'Audit Special Logon',
                                  'Subcategory GUID': '{0CCE921B-69AE-11D9-BED3-505054503030}'},
          'Audit System Integrity': {'Auditpol Name': 'System Integrity',
                                     'Exclusion Setting': '',
                                     'Inclusion Setting': 'No Auditing',
                                     'Machine Name': 'WIN-8FGT3E045SE',
                                     'Policy Target': 'System',
                                     'Setting Value': '0',
                                     'Subcategory': u'Audit System Integrity',
                                     'Subcategory GUID': '{0CCE9212-69AE-11D9-BED3-505054503030}'},
          ...
      }
  
      .. note::
          `Auditpol Name` designates the value to use when setting the value with
          the auditpol command
  
      Args:
          option (str): The item from the dictionary to return. If ``None`` the
              entire dictionary is returned. Default is ``None``
  
      Returns:
          dict: If ``None`` or one of the audit settings is passed
          list: If ``fieldnames`` is passed
      '''
      if 'lgpo.audit_defaults' not in __context__:
          # Get available setting names and GUIDs
          # This is used to get the fieldnames and GUIDs for individual policies
          log.debug('Loading auditpol defaults into __context__')
          dump = __utils__['auditpol.get_auditpol_dump']()
          reader = csv.DictReader(dump)
          audit_defaults = {'fieldnames': reader.fieldnames}
          for row in reader:
              row['Machine Name'] = ''
              row['Auditpol Name'] = row['Subcategory']
              # Special handling for snowflake scenarios where the audit.csv names
              # don't match the auditpol names
              if row['Subcategory'] == 'Central Policy Staging':
                  row['Subcategory'] = 'Audit Central Access Policy Staging'
              elif row['Subcategory'] == 'Plug and Play Events':
                  row['Subcategory'] = 'Audit PNP Activity'
              elif row['Subcategory'] == 'Token Right Adjusted Events':
                  row['Subcategory'] = 'Audit Token Right Adjusted'
              else:
                  row['Subcategory'] = 'Audit {0}'.format(row['Subcategory'])
              audit_defaults[row['Subcategory']] = row
  
          __context__['lgpo.audit_defaults'] = audit_defaults
  
      if option:
          return __context__['lgpo.audit_defaults'][option]
      else:
          return __context__['lgpo.audit_defaults']