Procurement rules can trip up agencies in emergencies, but permissions exist