If it walks like a duck and it quacks like a duck and it is enforced like a duck—is it a security?