How AI Is Useful -- and Not Useful -- for Cybersecurity