The Tropos Metamodel and its Use