The security vulnerability payout set bug hunters rejoicing, but claiming the reward is much, much easier said than done.