AAD access token auth

Although the configuration types for the various storage mechanisms provide a place to configure an AAD-based client identity (as opposed to, say, access key based access, or a password in a connection string) we don't yet properly support this across the board. This needs to be implemented because for many scenarios, it offers a considerably more secure way to connect to storage services.