What Works (and Doesn't) Selling Formal Methods