New U.S. law requires government to report risks of overseas activities by ex-spies