How does a state spy on citizens?