CFIRP: What we learned in the first ten years