The Limits of Performance-Based Regulation