Frontier AI models should go to trusted cyber defenders before public release