How do I know if a company, university, or other potential foreign collaborator creates risk? What are examples of entities that I should not work with or that invite extra scrutiny?