COVID-19 lessons for not-for-profits