A new lawsuit could set boundaries on employers accessing your devices