Zero-day flaws in Tails aren't for sale, vulnerability broker says