A vulnerability in iOS HomeKit allowed unauthorized access to smart locks