for this to work the gray hat has to have a better understanding of the situation than the devs.