Add ability to provision VM initially without a local account
In a corporate environment where all VMs are domain joined (using the VM domain joining extension) the local account is a nuisance.
It would be nice if:
* you could simply not have a local account at all (perhaps with the ability to add it later via the VM access extension that can be used to reset the password currently)
* you could specify a local admin AD user/group via the VM domain join extension
* or alternatively add a local account expiration time that you can specify through an ARM template, which would allow me to say it should expire immediately and therefore it doesn't matter if it has an insecure password