Potential COVID-19 vaccine card 'loophole' circulating online