Active Directory Control Paths vs APX Labs Cipher XBOW Validation Benchmark (2026)