NOBUS is basically a doctrine of assuming that no one else will find and use these exploits, so they can be maintained as strict-offense.