Icasa must rule out private companies storing fingerprints and let operators compete to stop fraud.