Audit: 26,000 at Defence lack security clearance