Driver's safety 'diversion programs' are illegal, state auditor says