sec custody rule