NSO – not government clients – operates its spyware, legal documents reveal