IT offshoring still works, if you're careful