Ensure fatal exceptions do not cause key regeneration (#8778)

Author: fabiocav

src/WebJobs.Script.WebHost/Security/SecretManager.cs

@@ -95,7 +95,7 @@ public async virtual Task<HostSecretsInfo> GetHostSecretsAsync()
                         // so we read the secrets running them through the appropriate readers
                         hostSecrets = ReadHostSecrets(hostSecrets);
                     }
-                    catch (CryptographicException)
+                    catch (CryptographicException ex) when (!ex.InnerException.IsFatal())
                     {
                         _traceWriter.Verbose(Resources.TraceNonDecryptedHostSecretRefresh);
                         await PersistSecretsAsync(hostSecrets, null, true);
@@ -161,7 +161,7 @@ public async virtual Task<IDictionary<string, string>> GetFunctionSecretsAsync(s
                     // Read all secrets, which will run the keys through the appropriate readers
                     secrets.Keys = secrets.Keys.Select(k => _keyValueConverterFactory.ReadKey(k)).ToList();
                 }
-                catch (CryptographicException)
+                catch (CryptographicException ex) when (!ex.InnerException.IsFatal())
                 {
                     string messageNonDecrypted = string.Format(Resources.TraceNonDecryptedFunctionSecretRefresh, functionName);
                     _traceWriter.Info(messageNonDecrypted, traceProperties);