Rooting out Risky SCCM Configs with Misconfiguration Manager