Security expert kick-starts fund to pay Facebook bug finder a $10K bounty