How a ransomware negotiator ended up arrested at his own conference