you are developing an azure-based application that stores all application settings in the azure app configuration service. you provision a standard tier azure app configuration instance and enable the customer-managed key capability on the instance. you need to allow the azure app configuration instance to use an azure key vault key. which two actions should you perform? each correct answer presents part of the solution.