It seems pretty clear to me (Occam's razor): 1) he was told he had to use the same monitoring process all the other providers were using 2) as a state secret,

It seems pretty clear to me (Occam's razor): 1) he was told he had to use the same monitoring process all the other providers were using 2) as a state secret, he couldn't reveal he was doing it ever to his users 3) if he complied he would totally undermine the nature of his service Anything else is superfluous.