The U.S. is preparing to let vetted private companies conduct offensive cyber operations under federal authority. It could strengthen American cyber power—or create a new class of corporate privateers wielding capabilities once reserved for the state.