Add an extra transparent layer of redundancy for AKV.
Each AKV is has redundancy as a region pair. ie, West and North Europe. If both these regions are down then any applications using this are down. My case is SQL server TDE.
Add a way to copy the keys and secret to another/multiple Region pair (already exists) but with a load balancer/failover group above.
Therefore SQL will reference the failover group, which will route the request to what ever vault is working.