Assign a service endpoint to the Key Vault in the spokes

[SvenAelterman]

Decided against doing this as current state of the Key Vault is more secure without public access enabled at all