Social Security, Medicare oversight posts vacant for 3 years