Vaccine 'passports' juggle privacy, authenticity, inclusivity