Using Value-at-Risk to reconcile limited liability and the moral-hazard problem