How to protect your company—and yourself—from activist investors