You are deploying a couple of virtual machines that will access Azure Key Vault and Azure SQL Database. Later on you plan to add additional virtual machines. What solution will you use to make sure that no secrets will be stored on the virtual machines, you minimize the administrative effort and don't need to assign new roles and permissions when new virtual machines are added?