DoD in discussions with vendors to simplify cloud security rules