Spoofing bug highlights cybersecurity for digital vaccine passports