Microsoft-first security model