RWA Tokenisation Without Custody Is Incomplete