Hackers may face 20 years in jail if seen to threaten US national security