Rescinded sanctions and reactivated contracts have created confusion about the Trump administration's spyware policy and where it draws the line.