Security Research exemption for DMCA considered