When an external auditor uses the work of a specialist, who remains responsible for the audit opinion?