On legitimacy in impact assessment: an epistemologically-based conceptualisation