I’m considering an initiative to get rid of secrets in all of our Azure resources using MSI, primarily. I’d set up MSI everywhere we’re using text credentials and client secrets, and let MSI do the heavy lifting.