The argument for "it shouldn't" could be that it's a federal supplier and/or some sort of RnD exception. Not sure if NIST would even sell to a private buyer.