The White House wants new transparency into software components. The security benefits won't arrive quickly.