The White House has offered an insight into how the NSA and others make decisions about when to reveal software bugs – and which to keep secret.