So-called firewalls at i-banks and consulting firms are routinely circumvented. These conflicts are self-policed and waivers are doled out more often than not