Azure.Identity.AppContextSwitches
First-party-only feature switches resolved from AppContext with an environment
variable fallback. These are intentionally not exposed on the public API surface.
When true (the default), ClientCertificateCredential can request an mTLS
proof-of-possession token when proof-of-possession was requested by the caller. Set the switch or
environment variable to false to force bearer tokens. Intended for first-party callers only.
The AppContext switch takes priority over the environment variable.