Disable local accounts for AKS cluster and use AAD only for more secure cluster access.

Source