The Idaho secretary of state's office created a vulnerability disclosure policy, allowing researchers to test election-related websites for potential flaws.