German software firm SAP SE show the benefits of self-disclosure with reduced penalties for US control breaches