Post-crisis regulation may take a third form