which method is used by Cisco Security Agent to get user state indormation from the operating system?