Text this: Toward managing security cost for healthcare information