block sas tokens in azure