How to measure single-name credit risk concentrations