TSA rail, subway spot-checks raise privacy issues