What Keeps Vendors Away From 'Regulatory Sandboxes'? It Starts With Timing