Stories abound about how easy it was to start a medical cannabis business in California and Colorado in the early days. But as the cannabis industry has grown up, the barrier to entry has risen substantially, raising the question of whether it's too late for mom-and-pop operators to get in.