Cyber insurance captives let large enterprises retain and finance more of their own cyber risk. Here's when self-insuring cyber actually makes sense.