Experts urge prep for Microsoft's cert-blocking update