Heh, understanding apache configuration files just made me facepalm harder and wasn't really critical to seeing the impact on the cybersecurity industry if people aren't able to responsibly disclose.

The important thing was to take the time, speak to the bill's author, speak to my colleagues, build a coalition of lobbyists from industry (big companies, startups, etc.), and not stop fighting the bill even after it passed the legislature.