AzSK_SVTs release task generates a warning about service principal secret being included in a file on a hosted VM (Only on AzSK Version 3.13.0) about devopskit

I keep thinking we have a problem in our build because of this guy. The actual task runs fine, but one of the many, many lines of output is this tiny little warning that I hope is spurious. Would appreciate a fix or guidance.

[ankrause]

This appears to be an issue in 3.13.0 and above. I'm using the latest version of the SVTs task (v4.0.0) and I still get this warning on hosted releases.

[rafamarrara]

Does AzSK_SVT task use Azure PowerShell cmdlet Connect-AzAccount with -ServicePrincipal parameter?

I was troubleshooting another issue with similar warning msg and I found this issue here with the same msg.

 <data name="ServicePrincipalWarning" xml:space="preserve">
    <value>The provided service principal secret will be included in the '{0}' file found in the user profile ( {1} ). Please ensure that this directory has appropriate protections.</value>
 </data>

https://github.com/Azure/azure-powershell/blob/master/src/Accounts/Accounts/Properties/Resources.resx#L411

        if (azureAccount.Type == AzureAccount.AccountType.ServicePrincipal && string.IsNullOrEmpty(CertificateThumbprint))
        {
            azureAccount.SetProperty(AzureAccount.Property.ServicePrincipalSecret, password.ConvertToString());
            if (GetContextModificationScope() == ContextModificationScope.CurrentUser)
            {
                var file = AzureSession.Instance.ARMProfileFile;
                var directory = AzureSession.Instance.ARMProfileDirectory;
                WriteWarning(string.Format(Resources.ServicePrincipalWarning, file, directory));
            }
        }

https://github.com/Azure/azure-powershell/blob/master/src/Accounts/Accounts/Account/ConnectAzureRmAccount.cs#L327

I hope this info can help you here :-)