What exactly is it supposed to mean that the NSA intercepts only data with one "foreign end"? That it intercepts all data that crosses e.g. a transatlantic cable? Or that it scans the IP header of absolutely everything and grabs anything with a non-US IP as either source or destination? Or something else?