feat(brain) don't ask for SSN; allow bypassing compliance