Corporate Social Responsibility: Private Autonomy or Private Authority?