Security a work in progress for Microsoft