Revelation raises questions about whether Pete Hegseth updated his security practices before Signalgate