Execute AD queries protected by modern authentication from Azure without VPN - SCOMnewbie learnings