how to implement bug bounty