What feds can learn at conferences like RSA