Debt collectors have more tools than you'd expect, but there's a clear line around what they can and can't do.