Terrorist risk lists leave gap, even now