Customers start demanding security? Validation of security auditing isn't something I commonly see in purchasing.
If your threat model includes 3 letter agencies, the short answer is that you cannot.
Problem is that the 3-letter agencies tools get leaked and then are open for script Kidd to use. So you're threat model has a dristributive connection to the 3-letters no matter what.