An azure storage can contain blob, file share, table, and queue types. Of these, what types of services can be currently encrypted using customer managed keys? I cannot find a definitive answer in the documentation. Can you please provide relevant link to the documentation?