Private US companies can now run cyber operations abroad. State-backed hackers are excluded — Blankdot