Under the "penny stock rule," a customer is considered to be "established" and does not have to sign a suitability statement to buy a penny stock if that customer has bought how many penny stock issues previously from that broker-dealer?