Microsoft has taken the first steps toward reimagining how security firms protect Windows, including making it possible for security apps to run outside the kernel.