Interested in the regulatory aspect of ICOs, I'm hearing a lot of info. Are third party KYC companies not legally responsible for a client co? How would an ICO handle KYC by themselves? How would they (the ICO) conduct due diligence?