What is the most likely cause for this issue?

While retrieving a secret through REST, the secret retrieval fails to find a matching secret. You know the secret onboarding process was completed, the secret is in the expected safe with the expected object name, and the CCP is able to provide secrets to other applications.

What is the most likely cause for this issue?
A . The application ID or Application Provider does not have the correct permissions on the safe.
B . The client certificate fingerprint is not trusted.
C . The service account running the application does not have the correct permissions on the safe.
D . The OS user does not have the correct permissions on the safe

Answer: A