What is the second component that defines a principal shareholder under Regulation O, besides ownership and familial attribution?