"The key point about this power, though, is that it has no judicial oversight. Access to citizens’ web history will be solely at the discret[…]