What is the security characteristic line and what is the security market line? How do we use each of these lines?