Most people don't feel confident in their ability to detect deepfakes, and that could mean trouble for identity security.