Regexes Are Hard: Decision-Making, Difficulties, and Risks in Programming Regular Expressions