Former Uber security chief Joe Sullivans conviction is a rare criminal consequence for an executives handling of a hack.