Text this: Optimally Auditing Adversarial Agents