A new Transportation Department rule lets carriers skip meal vouchers and hotels for cyberattack delays if they meet security rules.