SEC charges three firms with violating custody rule