40.223—What steps must be taken to protect the security of alcohol testing sites?