The disclosure regime of credit rating agencies: an obscure veil of compliance?