Getting Crypto Regulation Right