What is the role of patch management in maintaining security?