What is a common mistake with Azure Key Vault in Microsoft Azure?

Embedding secrets in app settings or giving broad vault permissions to applications increases exposure and operational risk. In practice, the value of this concept comes from understanding where it belongs in the architecture, what problem it solves, and what constraints or tradeoffs it introduces.