The August 2025 White House presidential memorandum explicitly prohibits private cyber contractors from attacking nation-state actors