“The driver of Alexander’s bus had a list identifying how many kids were to get off at each stop, but wasn’t allowed to know their names for “security” reasons. The bus company had considered providing photographs to the drivers, but again feared unspecified “security” concerns.”