Clarify MT.1020 for Microsoft Entra Connect application-based authentication (#2113)