KPMG wrist-slap shows auditors are too few to fail