Years before the SolarWinds hack was, a Microsoft engineer knew security flaw