More best practices as SEC whistleblower rule formally takes effect