Biometric cameras scan faces and add shoppers to a secret watchlist of suspects, holding their data for years.