Inside the unusual world of cyber insurance, where ransoms are legally paid to criminal hackers