New US IoT law aims to improve edge device security