Regulatory Hacking