Small automakers and suppliers challenged by new cybersecurity regulations