Regulators had to work with limited existing information on the possible risks of pesticides and contaminants in marijuana.