The latter applies.
Seems to be the case, no? It is important to be able to recognize agents provocateur.