Currently, multiple service principals on container registry resources aren't supported as docker-credential-acr-env cannot identify which principal it should use.
This can be fixed by setting the AZURE_CLIENT_ID env var as the client id of the cluster nodes resource group.
Todo: