maybe in the future all token holders need KYC so that a token cannot be misused for bad or illegal things. Is it possible