[C]ontractual provisions that would permit, among other things, a service provider to delete or discard records in the event of non-payment by the broker-dealer are inconsistent with the retention requirements of Rule 17a-4 and the undertaking requirements of paragraph (i) of Rule 17a-4.7 Moreover, if a service provider deletes or discards broker-dealer records in a manner that is not consistent with the retention requirements in Rule l 7a-4, such action would constitute a primary violation of the rule by the broker-dealer and may subject the service provider to secondary liability for causing or aiding and abetting the violation.