It is now possible to authenticate with Azure Storage via Managed Identities and completely ignore the tokens in the connection string.
However, it requires a new way of instantiating the connections, so would require some refactorings, are you interested in this?