Deloitte: 8 things municipal governments can do about ransomware