What to weigh if pondering attorney-client privilege in compliance investigations