Doesn't need to be airgapped, just defended, and not in the cloud. If the client is someone like Juniper or Cisco (which, if you're a pentest firm buying 8x gp

Doesn't need to be airgapped, just defended, and not in the cloud. If the client is someone like Juniper or Cisco (which, if you're a pentest firm buying 8x gpu servers for cracking hashes, would be a reasonable customer) nation state actors would absolutely love to have access to your dataset. And they're already in AWS's datacentres.