Twenty Azure VMs, deployed from the same template, each run a service that reads secrets from one Azure Key Vault. The operations team rebuilds these VMs regularly and does not want to repeat the access setup on the vault every time a VM is recreated. They also want no credentials stored on the VMs.