US agencies explore cybersecurity incentives for the private sector