Evaluating healthcare policies: the case of clinical audit