While President Biden’s recent executive order is a good first step, it doesn’t address the bulk of federal contracts with private prisons.