Yes, it's legal for private businesses to require proof of vaccination. Here's why