A bill that would exclude organizations from prosecution for hacking back is already stirring up some concerns about potential unintended consequences.