Securing critical Azure services with service endpoints