and is therefore subject to the GPL
Not a problem. If they use it in their agency and never distribute it,
they are not obligated to publish the code.