Public search query: does not have secrets get permission on key vault