DISA & DARPA would have done some of that testing before the McAfee/ARMY/ACS contract RDY2ROCK brought to our attention. You'll recall the ACS briefer even mentioned it in the Health Care CIO presentation.