Is the NSA Using Zero-Day Exploits before Reporting Them?