The Cold Truth about Cyber Insurance