Implementation rules should limit drawbacks of anti-money laundering rules