Cyber insurance and HIPAA violations intersect in ways that surprise a lot of healthcare organizations. Here's where the coverage actually stops.