A relic of the past, legacy code poses significant security risks to government agencies, writes Craig Nielsen.