Limiting Recertification in Highly Configurable Systems: Analyzing Interactions and Isolation among Configuration Options