Last month the SEC signed its first-ever deferred-prosecution agreement with a company. The intent of the SEC's DPA is "essentially to create incentives for corporate self-policing, self-reporting, and self-remediations," says John Sturc, partner at law firm Gibson, Dunn & Crutcher. But is self-disclosing your way into a DPA really worth the risk? Not everyone is sure.