The Custody Rule provides that “it is a fraudulent, deceptive, or manipulative act, practice or course of business within the meaning of section 206(4) of the [Advisers] Act … for [a registered investment adviser] to have custody of client funds or securities unless” the adviser implements an enumerated set of requirements to prevent loss, misuse, or misappropriation of those funds and securities.