Validation in the absence of observed events: weapons of mass destruction (WMD) terrorism risk assessment models