The whole problem is that there has to be a competent engineer who does not want to use this knowledge to get famous. See, a Security Director would love to see

The whole problem is that there has to be a competent engineer who does not want to use this knowledge to get famous. See, a Security Director would love to see a direct report of their inadequacy buried... if someone knows then it is harder to bury.