Cyber insurance for nonprofits has to work within real budget constraints, without leaving donor and beneficiary data exposed to the same threats larger organizations face.