Even limited voter rolls can be linked to identify people, research shows