Considerations for governing open foundation models