Tech firms should be allowed to publish more data on US surveillance