Federal rulemaking on online program authorizations unclear