Can security tokens fulfill their promise of liquidity?