?

What is the key to limiting the duty of care owed by an auditor to third parties as defined by the foreseeability principle?