Third-party right to work checks risk