Hong Kong police can now demand phone passwords under new security rules