Identity theft protection services promise monitoring and recovery help. Here is how they actually work, what they cover, and where their real limits are.