What the Retail Face Recognition Revolution Means for Security and Privacy