Why does the LanGuard scan detect missing critical updates when the Windows Update cannot find any new update on the client machine?