it's not about if a KYC to be included or not, the question is when to have it as must, before user can buy token or post the ICO