China’s New Cybersecurity Law Leaves Foreign Firms Guessing