Exploit Etiquette: Can auditor alerts during major hacks do more harm than good?