How regulators can make smart devices more secure against hackers