For lenders trying to make bank statement loans that qualify as QMs, a little-noticed addition to a Regulation Z commentary could create uncertainty around whether they’ve properly verified the borrower’s income.