When Richmond created its ID card for undocumented residents, it was only trying to help. But one digital security expert believes their good intentions simply aren't enough.