I would think the impetus is on not clearing "bad apples" in the first place and getting physical security improved (he walked off with a USB pen drive). After

I would think the impetus is on not clearing "bad apples" in the first place and getting physical security improved (he walked off with a USB pen drive). After all, you can still trivially leak from inside the US - also, it's not like you can keep NSA employees from ever taking trips abroad, and if you have measure in place that can find people who are about to leak stuff when they put in their 30 days foreign holiday request, the much simpler solution is to just run that measure all the time.