No Log for downloaded Certs
Add a Log Analytics OperationName for when a Certificate is downloaded from the Vault. Since the Vault only allows downloading a cert without a PK password, then allow us to generate an alert when the Certificate is downloaded so we can stop a person or check why they downloaded it. Currently non of the operations pinpoint that a download was attempted.
