New CMS rule requires hospitals, not vendors, to do annual safety self-checks: 5 details