Azure Abusing Azure AD SSO with the Primary Refresh Token An Operator’s Guide to Device-Joined Hosts and the PRT Cookie