of course not; just explain how its ok for a "company" to do an audit of our curve signing implemenation, but not ok for a private competent individual to do it, just because he happens to teach at a university?
Ok, I'll try one more time (by the way, nice example from utopianfuture about the rating agencies).
When you pay a company, it does the audit and hands results
to you.
When an (already-on-a-salary) academic does a review, he announces it to the whole world.
Small, but crucial difference.