3 questions state and local governments must answer about identity security