It's usually somebody at the program management level (government or contractor) who's decided that they want all information to funnel through them for insecurity/political/career reasons. (FWIW, if you are letting your users talk to the developer/vendor, and as you've described, you're doing things the right way.)
Bookmarks