Credit Stress Testing for Financial Institutions: Why the Data Behind Your Scenarios May Not Survive Regulatory Scrutiny