If this tool is something that is deployed by the organization to be used by different people, then it should be developed by a programmer, not a hacker. The h

If this tool is something that is deployed by the organization to be used by different people, then it should be developed by a programmer, not a hacker. The hacker can find the weakness and come up with the proof-of-concept exploit, but that's it. An organization as large as the NSA should be able to understand this, and manage people well enough to accomplish this.