If bitcoin is not a security, how could someone also create a non-security token like bitcoin? This seems very unclear