Cert deployment - Allow regions to be different for keyvault and VM
today, VM and keyvault needs to be in same region. This causes lot of pain for services that have deployments in all Azure regions. We need to copy and rollover all same cert in all regions..
Agreed - the implementation should be the same as Cosmos DB, so all of the redundancy is taken care of and you simply connect to an endpoint. With a specifiable automatic failover.