Who can tap the Aadhaar database? India’s private firms are still guessing