A lot of teams arrive at managed identity azure after one bad week. A service principal secret expires. A deployment fails at night. Someone finds a connection string copied into a wiki, a pipeline variable group, or a test app that became production critical. The fix usually works, but the pattern stays the same. Humans…