azure-extensions-cli should be able to fetch secrets from Key Vault. This would better support existing work flows.