If someone had a criminal record for hacking, should they be considered for recruitment by a country's cyber defence forces?