Instead of waiting for patch cycles, admins could simply shut down vulnerable functions before attackers get there