When Outsourcing Security Services Makes Sense