covariance can be negative, so I no longer take the square root of it