Handle authentication to Azure services in .NET securely — managed identity and service principals, no embedded keys