Zero secrets in code: managed identity for service-to-service auth
The app signs in with one Azure credential, and settings hold account names and endpoints, with one certificate left for…
Passwords in app settings are a security risk
The system that reads your documents should sign in as itself, not with a password pasted into config.