What are some common challenges that SRE teams face in keeping large services running within SLAs?