Hi! Any ideas on how to setup azure aks workload identity with pulumi? Doing it with the cli it says to add these two args

--enable-oidc-issuer --enable-workload-identity

(ref: https://learn.microsoft.com/en-us/azure/aks/workload-identity-deploy-cluster#create-aks-cluster) however I don't see a similar option on the docs page yet, but maybe it is part of one of the Identity related maps? (ref: https://www.pulumi.com/registry/packages/azure-native/api-docs/containerservice/managedcluster/#identityprofile_go)