New rule about protecting 'controlled' information to affect contractors, other gov't partners