When there's enough to prosecute, refer the case to DOJ for charging people with criminal violations. NSA officials in the past have been mirandized (https://firstlook.org/theintercept/2014/10/02/the-nsa-and-me...) in expectation of criminal charges. But until the state secrets veil gets well pierced, it's unlikely that a prosecution can gather and show enough evidence to convict.