SEC staff guidance indicates that a crypto project may maintain central control if a company or small group holds unilateral power to alter network rules, restrict access, or override decisions