You can always register the domain for 10 years, and then just keep renewing it every year so you always maintain 9 to 10 years of future paid registration.
My understanding is the SIGINT and CSS groups are essentially two separate organizations, somewhat firewalled from each other, with separate reporting chains all the way up to the director of the NSA. Is that true?