Exchanges would get a two-year grace period if the SEC determines a token they list is an unregistered security.