Do credit rating agencies do a good job at assessing credit risk?