Even when using a TPA, plan sponsors must retain documentation for loans and hardship withdrawals, IRS says.