regression: azuread_application
- don't populate the password
block unless specified in config
#1422
+29
−8