Azure Key Vault supports setting tags on its entries. We can already pull secrets based on those, but cannot push with tags.