To tell or not to tell? That is the question facing a little-known, highly secretive U.S. government entity that examines cyber holes and decides whether they should be fixed, monitored or exploited.