Federal agencies need stricter limits on facial recognition to protect privacy, says government watchdog