CMMC 2.0 to pare down cybersecurity requirements for contractors