When using the non-documentary method for CIP verification, is it enough to just record a description what was relied on to verify identity (type of document, identification number, place of issuance, issuance and expiration dates, etc.), or must an actual printout or copy of what was utilized be retained as well?