Vendor role in NERC's upcoming cyberattack exercise unclear