Federal statutes permit the FAA to keep security research and development activities and regulations private. Thus the pre-TSA regulations regarding CAPPS -- all FAA issue -- have not been made public.

Therefore, the regulations could not be held to be unconstitutional because their status is derived from statutory authority. The only argument would be that the governing statute is unconstitutional, and that is an uphill battle (to say the least.)