Gravar-mail: Two-stage Sampling Designs for External Validation of Personal Risk Models