Fear of federal regulatory penalties leads commercial firms to overcomply by prohibiting transactions adjacent to sanctioned activities