Should you employ a former black hat hacker?