Risk-Averse Strategies for Security Games with Execution and Observational Uncertainty