Microsoft's IT security plans spark controversy