The country has ordered companies operating VPNs to collect user data and hand it over to officials—but they’re refusing to do so.