SEC paints a picture of what not to do when it comes to RIA compliance