How Pilots Think About Risk