Modify the templates so that a Key Vault is created and the validation key is uploaded to that.
All nodes that then use the key will pull directly from there. This will simplify the setup of nodes as they will not need to run the chef-client twice:
- for installation
- after the key has been downloaded