Scenario 2: This template creates and deploys an Encrypted Windows VM on Azure! Bitlocker key in clear (no Kek).
Scenario 3: This template creates and deploys an Encrypted Linux VM on Azure! Secret is encrypted with a Kek.
Scenario 4: This template creates and deploys an Encrypted Linux VM on Azure! Secret is not encrypted with Kek.