Identity-Protection Services: Are They Worth Paying For?