Pot shops and banks are in the weeds when it comes to compliance