Having it all: can collaborative governance be both legitimate and accountable?