https://platoblockchain.com/plato-data/microsoft-id-security-gaps-that-let-threat-actor-steal-signing-key/