I was thinking the same thing. Figure out the scalability issues, work on performance, and of course anti-detection. Then roll it out somewhere more sophisticated.

And do it in a friendly, dependent country who can be relied on for a "no comment" when asked.

Or the NSA is providing a framework for the DEA and other agencies to use in the future.