Quantum security of subset cover problems