audit committee authority limits