Device Guard in Windows 10 keeps malware away