Governance flaws are starting to hurt banks’ credit ratings