Too many data-loss prevention tools become shelfware, says analyst