Hong Kong police can now demand phone passwords under national security law