It is vital, security researchers say, to have a way to monitor millions of devices in smart cities and push out automatic patches.