The 3 questions you need to ask when you see users doing workarounds