What are the security issues and challenges presented by vaccine passports, and how should they be designed and used with ethics and privacy in mind?