DHS had little choice but to sign Microsoft deal, despite security flaws