A malicious user could be a big threat to our business. Right now, we are in beta and manually verify every user. My guess is the same; we'd see a major drop-off after a demo. We've been thinking about requiring a demo, re-captcha, requiring a phone number, requiring a credit card - and are debating the method that's most effective that would lead to the least amount of drop-off.