[azidentity] DefaultAzureCredential: add exclude_managed_identity_credential, etc.

[letmaik]

Feature Request

There should be feature parity with the Python SDK.

Specifically I would like to use exclude_managed_identity_credential, exclude_workload_identity_credential, and exclude_interactive_browser_credential with NewDefaultAzureCredential().

[github-actions]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[chlowell]

Thanks for opening this issue. There are a couple big reasons we don't plan to add options like these. First, they would encourage people to try to make DefaultAzureCredential work in scenarios where it would be better to use a more specific credential type instead. Using a more specific type is generally the best approach in production because it makes authentication more predictable and robust, and easier to debug when something goes wrong. Second, they would needlessly complicate the API. There's no need to selectively disable parts of DefaultAzureCredential because all the credential types it uses are available separately and ChainedTokenCredential enables building a similar chain of them.

[letmaik]

@chlowell That sounds reasonable. I think though those design principles should be established across the different languages, otherwise it becomes confusing why the Python SDK has the options and others don't.