Federal employees may soon be ordered to work from home. That could pose serious cybersecurity risks