An FAQ from HackerOne says it's had to suspend bug bounty programs for companies in Russia, citing the US sanctions. But Kaspersky says it shouldn't be subjected to the restriction.