Why Automated Pentesting is not the Answer to Fixing the Security Skills Gap