Exactly, there's enough wiggle room in non-technical terms like "direct access" that both the accusation and the denials could be true. Does it mwan root access, SQL access, or if PRISM involved a search API (thin wrapper around the db) would that count?