I agree. It is the responsibility of the individual to reveal such information when they assess that it can be dangerous. If somebody comes in contact or in possession of information that could reveal that there is maybe a weakness within the system, it is also the responsibility of that individual to share that information with the proper authorities. This information should be transmitted and shared by anybody who receives a security clearance, at the time they receive their security clearance and when they are indoctrinated with such a thing.
On June 10th, 2008. See this statement in context.