Under a new plan, about one-third of CISA's staff will keep working through a shutdown. But experts are still concerned about the impact on U.S. cyber defenses.