I Suffered So That You Don't Have To You should(?) prevent SAS-access for Azure Service Bus using this built-in policy