The person arming it, and people trying to disarm it if they're trying to punch in codes but probably not if they're just cutting wires.
The people being blown up aren't using the software, even if they're receiving the product of it's use. You don't need to send the GPL with everything you compiled with GCC for example.