The shadowy trade in European spy software