Add flag in SecretClientOption and SecretClient

Author: JonathanCrd

sdk/keyvault/Azure.Security.KeyVault.Secrets/src/SecretClient.cs

@@ -65,7 +65,7 @@ public SecretClient(Uri vaultUri, TokenCredential credential, SecretClientOption
             string apiVersion = options.GetVersionString();
 
             HttpPipeline pipeline = HttpPipelineBuilder.Build(options,
-                    new ChallengeBasedAuthenticationPolicy(credential, options.DisableChallengeResourceVerification));
+                    new ChallengeBasedAuthenticationPolicy(credential, options.DisableChallengeResourceVerification, options.enableCAE));
 
             _pipeline = new KeyVaultPipeline(vaultUri, apiVersion, pipeline, new ClientDiagnostics(options));
         }

sdk/keyvault/Azure.Security.KeyVault.Secrets/src/SecretClientOptions.cs

@@ -87,6 +87,11 @@ public SecretClientOptions(ServiceVersion version = LatestVersion)
         /// </summary>
         public bool DisableChallengeResourceVerification { get; set; }
 
+        /// <summary>
+        /// Enable Continuous Access Evaluation (CAE) for the client.
+        /// </summary>
+        public bool enableCAE { get; set; } = false;
+
         internal string GetVersionString()
         {
             return Version switch