Getting businesses to check customers' vaccination statuses a 'tough ask'