Is asking for proof of a coronavirus vaccination a HIPAA violation?