Antivirus companies should stop concealing the US-implemented attack software they detect.