EPA watchdog faults agency for Pruitt’s 24/7 security costs