US tourists in Hong Kong must reveal their device passwords — or be arrested