What is the third component that defines a principal shareholder under Regulation O, besides ownership and direct or indirect control/power?