So-called ethical hackers hack companies to help them fix flaws, but not all firms are thrilled by the idea.