Cybersecurity investments with nonlinear budget constraints: Analysis of the marginal expected utilities