I think they're trying to keep cryptographically secure data out of scope.