What can law firms do to prevent departing employees from accessing their databases to collect client information? Not much, attorneys say.