If you can fingerprint a penetration workstation, they're doing it wrong