Are there any special requirements for security tokens? I thought it can be listed on any exchange just as utility token or am I wrong?