From past experience this is the auth failing, but my az account show works - and shows the subscription I want to deploy to.