Open-source scanner can identify risky Microsoft SCCM configurations