I heard that the Metasploit hacking tool is going to be delivered as a service. Is it smart for security folks, however, to send over their critical data to an outside provider?