How hard would it be for the NSA to "partner" with the SSL accelerator manufacturers to add functionality that sends copies of all the ECDHE negotiated keys to

How hard would it be for the NSA to "partner" with the SSL accelerator manufacturers to add functionality that sends copies of all the ECDHE negotiated keys to the NSA so that they can decrypt most of the encrypted traffic that they captured off the backbones?