It's time to draw some boundaries around what insurers can use to create a price - and what they can’t