Facial recognition's surveillance capabilities should concern feds, watchdog says