How not to be a victim of a decertified EHR