How to Enable Token Protection in Entra Conditional Access for Windows App to Secure AVD and Windows 365