overall demo: disable scanner accounts when done

[potatoqualitee]

make the credential backend pluggable https://docs.tenable.com/nessus/compliancechecksreference/Content/CredentialedScanningandPrivilegedAccountUse.htm group managed service accounts https://devblogs.microsoft.com/powershell/secrets-management-module-vault-extensions/