A key US government surveillance tool should face new limits, a divided privacy oversight board says