Is Azure Key Vault appropriate to store encryption keys generated on client applications