I wonder how agencies can limit the amount of leaks, when their human employees with "secret knowledge" have moral conflict concerning their work and feel that they have nothing to lose. Is it too far away to even think about possibilities like extorting employees with things that could happen to their family members for example? North Korea comes to my mind as an extreme example - "escape and all your relatives are sent to torture camps". What are the preceding steps?