Regulators haven't exactly covered themselves in glory. But an earlier defense against bank excesses ought to be their boards. It's no easy job, but directors could try harder to control risk-taking. They shouldn't be shy about hammering away with uncomfortable questions.