In-Depth: Can businesses ask about your vaccine status?