Investigate whether we should expose options to enable CPK (client provided key) encryption for Azure

When uploading blobs to Azure, you may provide client provided key encryption options; we currently don't expose options to change/set these values. We should investigate whether we should expose these options to the user e.g. via environment variables (CLI flags are too cloud provider specific).