Justice Department must say what it does with SARs, GAO says