Should we allow other types of authentication than only DefaultAzureCredential when retrieving potential expired client secrets?

[stijnmoreels]

Currently, we only use the DefaultAzureCredential class to authenticate and retrieve potential expired client secrets. This includes environment credential, managed identity credential and others but not (for example) other types like token credential.

Should we support this? Or is that not necessary since managed identity is the recommended approach?