Understanding email anomaly detection in Klaviyo