Restructuring GitHub's bug bounty program