Internet firms push to be left out of EU cybersecurity law