You have an azure storage account named storage1. You create the following encryption scopes for storage1: scope1 that has an encryption type of microsoft-managed keys scope2 that has an encryption type of customer-managed keys which storage services can be used with scope2?.