What Makes Security Research Good Faith?

The justice department recently released new guide lines for prosecutors about how to pursue c f a a cases. There's an exemption carved out that says, we don't want prosecutors to charge anybody doing good faith security research. i think there's going to bea lot of gray area between sort of, we did this research, we reported it responsibly to the companies that had an opportunity to fix it, and the researchers who are just like, oh, i found this thing, antht, i tried to extort somebody with it.