I haven't seen the NDA, and I don't know if it's actually required or not,
but Bugzilla admins would have access to the security queue, which would be something that
necessitates non-disclosure.
---
Brandon Harris, Senior Designer, Wikimedia Foundation
Support Free Knowledge:
http://wikimediafoundation.org/wiki/Donate