Digital security brokers not subject to enforcement for 5 years: US regulator