“Iran's ability to disrupt shipping in the Gulf is based on creating a perception of risk, which does not require significant resources.”