DHS considering punishments for contractors still using Kaspersky Lab products