How would you design a KYC onboarding flow that minimizes user friction while remaining fully compliant with the Patriot Act for Fin?