based on comments here, i do think we should allow users to run the audit first (and provide an email address if they want us to follow up with results later).