Can firms sue NSA for data breaches? Lawyers say good luck