Are synthetic CDOs still legal?