Credit Ratings and Security Design∗