The art of compromise? The individual and organisational legitimacy of “irregular auditing”