Looking forward to posting this one. I'm guessing it's another "by design", In which case all you Azure Security folks should stay tuned