AU security researchers need legal advice: CERT