But nothing is known about how long the NSA keeps records. So couldn't the NSA just shrug off the request saying that they don't have the record and not reveal any more details on their retention policy under the pretext that revealing anything more is a national security risk?