How journalists can cover leaks without helping spies