jar signing using a non exportable certificate with private key n azure key vault

When a certificate which is not exportable and has a private key is stored in Azure Key Vault and the Azure Sign Tool is used within an Azure DevOps pipeline—with addSpnToEnvironment set to true—Azure DevOps automatically injects the credentials (tenant ID, client ID, and client secret) into the environment as variables, allowing files to be signed without explicitly providing these credentials. Is there any api available that would allow to sign a jar file without providing any private key?