What about legitimate programs that are created to help legitimate penetration testers? And are forbidden from being used by people with malicious intent.