How does a company using GH for their closed source code know it's not being used in training, good faith?