in pkg/plugin/keyvault.go [299:304]
func getVaultDNSSuffix(managedHSM bool, env *azure.Environment) string { if managedHSM { return env.ManagedHSMDNSSuffix } return env.KeyVaultDNSSuffix }