Malware can borrow Windows Hello for Business keys to open a 90-day persistence channel into Entra ID.