Why weren’t HSBC’s money-laundering penalties bigger?