Mask ban for ICE agents emerges as flashpoint in DHS funding negotiation