US opens path for private firms to join offensive cyber operations