Rethinking risk tolerance