Auditability and legitimacy