Contractors will soon have to get cyber certified to do business with the Defense Department. But there's early concern that the Cybersecurity Maturity Model Certification framework would block DOD's efforts to leverage startups.