What vetting process do these contracts ostensibly for $25K and under but actually for much larger amounts actually go through, in terms of privacy, propriety, data security, etc. etc.? And why are DOE officials so eager to bend the rules?