Azure Managed Service Identity Best Practices