https://evolvconsulting.github.io/posts/jason-kososki/ado-secure-yaml/