Does code coverage provide a good stopping rule for operational profile based testing?