Visio Graphics Service Application

Problem description

I am running SharePoint Subscription on 4 Windows Server 2022 Standard.
Setting up both Visio Graphics Service Application and Secure Store Application works fine.
But how do I set Visio Graphics Service Application with unattended account and register it in Secure Store?

Ps
Somewhat new to DSC, bare with me.
Ds

Verbose logs

From Health Analyzer:
The Unattended Service Account is a single account that all documents can use to refresh data. It is required when connecting to data sources external to SharePoint, such as SQL. Without a valid Unattended Service Account Application ID, Visio Graphics Services will not be able to refresh Web Drawings that are connected to external data sources.
The rule for the Unattended Service Account Application ID failed. The ID does not exist. Visio Graphics Service Application

DSC configuration

SPVisioServiceApp 'VisioServices' {
                    PsDscRunAsCredential = $SetupCredential
                    Name = 'Visio Graphics Service Application'
                    ApplicationPool = 'VisioServiceAppPool'
                    Ensure = 'Present'
                    DependsOn = @('[SPMinRoleCompliance]MinRoleCompliance')
                }

                SPServiceAppPool 'VisioGraphicServiceAppPool' {
                    PsDscRunAsCredential = $SetupCredential
                    Name = 'VisioServiceAppPool'
                    ServiceAccount = $SpWebAppCredential.UserName
                    Ensure = 'Present'
                    DependsOn = @('[SPMinRoleCompliance]MinRoleCompliance')
                }

                SPSecureStoreServiceApp 'SecureStoreServiceApp' {
                    PsDscRunAsCredential = $SetupCredential
                    Name = 'SecureStore Service Application'
                    ApplicationPool = 'SecureStoreServiceAppPool'
                    AuditingEnabled = $true
                    AuditlogMaxSize = 30
                    DatabaseName = '_SecureStore'
                    DatabaseServer = $DatabaseServer
                    Ensure = 'Present'
                    DependsOn = @('[SPMinRoleCompliance]MinRoleCompliance')
                }

                SPServiceAppPool 'SecureStoreServiceAppPool' {
                    PsDscRunAsCredential = $SetupCredential
                    Name = 'SecureStoreServiceAppPool'
                    ServiceAccount = $SpWebAppCredential.UserName
                    Ensure = 'Present'
                    DependsOn = @('[SPMinRoleCompliance]MinRoleCompliance')
                }

Suggested solution

Not really at this point

SharePoint version and build

SharePoint Subscription build 16.0.1436.20450

Operating system the target node is running

WS 2022 Standard

PowerShell version and build the target node is running

PwSh 5.1

SharePointDsc version

SharePointDsc 5.4.0

Start with the SPVisioServiceApp and SPSecureStoreServiceApp resources and the supplied DSC configuration. Trace how the Visio unattended service account and Secure Store application ID are represented, then verify the result against the Health Analyzer requirement. Done means the ID exists and Visio can refresh externally connected web drawings.