The policy of truth: As ransomware claims rise, what's a cyber insurer to do?