Referencing Key Vault to access external data from Log Analytics

Hi everyone!

I've built a nifty solution that allows me to use the https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/externaldata-operator?pivots=azuremonitor operator to query some static data from blob storage via Log Analytics. This works great, but now I want to save this as a Function in Log Analytics and the token is easily read. So my questions are:

1. Is there a way to "mask" the token in the KQL query so that it isn't visible? or....

2. Is there a way to reference Key Vault to get the secret token ?

Any help is appreciated!