U.S. regulators propose nonbinding third-party risk guidelines for banks as Fed Governor Michael Barr warns of financial and oversight gaps.