Why wouldn't the FBI or NSA just demand the encryption keys and then sign their malware?