Why do some projects require KYC for bounty?  Is this a legal thing or is it a way to make sure they are not being scammed by bounty huntrs?  Are there jurisdictions which would require bounty to have KYC?  This is not a token sale after all.