You have an Azure subscription. You plan to deploy a new storage account. You need to configure encryption for the account. The solution must meet the following requirements: Use a customer-managed key stored in a key vault. Use the maximum supported bit length. Which type of key should you use?