Hey Community, How can I configure my Pulumi stack to use a secret from Azure Key Vault where the key for the remote state storage account is stored? I currently have to export it as an environment variable beforehand, but I would prefer to retrieve it directly from Key Vault. I'm fine with passing the resource group name, storage account name, and Key Vault name in the YAML, but I really want to avoid using environment variables. Can somebody give me a hint on how I can achieve that? Thanks!