GAO finds holes in DHS architecture