Re-read that sentence. The government agency is the user in this case, not the CA.
| TURKTRUST [a private company] did not spoof the
| .google.com certificate. They accidentally issued
| an intermediate (chained CA) certificate to a user
| [a government agency], who happened to be a
| government agency, and that user [a government
| agency] accidentally spoofed
| .google.com.