Learn how TrustSink abuses rogue Entra external authentication providers to capture passwords and why removing the provider matters after a reset.