What you said. The ECI leaks say they use them gor SIGINT-enabling. In Lavabit, the court order was to compromise all the keys then lie to users that it never happened.