Don’t Sign Yet: How to Detect and Avoid Hidden CRO Contract Costs