How should employees of a cybersecurity company be sentenced for stealing virtual currency?