Text this: Estimating software cost with security risk potential