SPLA audit: careful with what your reseller says