CNC controllers weren't built for cybersecurity compliance. Here's why that matters — and what the DoD actually expects you to do about it.