Or who simply e.g. violate NSPM-7. They aren't exactly operating within the bounds of statute themselves.