Healthcare outfit that served military personnel settles allegations it faked infosec compliance for $11 million