California shooting shows security vulnerabilities on buses