Analysis: Risk-retention rule is at risk due to exception