Many vaccine passports have security flaws. Here’s how to make them safer