Active Directory Control Paths vs Autonomous Penetration Testing Tool (2026)