GSA's new guide is raising concerns about an increasing patchwork of contractor cybersecurity rules across government.