As NSO Group mulls selling Pegasus, can we ever trust this spyware to become a tool for good?