JPMorgan board needs a dose of "trust, but verify"