(AzureCXP) fixes MicrosoftDocs/azure-docs#101385

Based on ICM 337785956, the VMs with disk encrypted with SSE+CMK, can be moved to another "Resource group" if it is in deallocated state. However, movement to another subscription of such VM would require the encryption to be disabled. 

Updating this doc with the new information.

Author: AnuragSingh-MSFT

articles/azure-resource-manager/management/move-limitations/virtual-machines-move-limitations.md

@@ -24,7 +24,9 @@ The following scenarios aren't yet supported:
 
 ## Azure disk encryption
 
-You can't move a virtual machine that is integrated with a key vault to implement [Azure Disk Encryption for Linux VMs](../../../virtual-machines/linux/disk-encryption-overview.md) or [Azure Disk Encryption for Windows VMs](../../../virtual-machines/windows/disk-encryption-overview.md). To move the VM, you must disable encryption.
+A virtual machine that is integrated with a key vault to implement [Azure Disk Encryption for Linux VMs](../../../virtual-machines/linux/disk-encryption-overview.md) or [Azure Disk Encryption for Windows VMs](../../../virtual-machines/windows/disk-encryption-overview.md) can be moved to another resource group when it is in deallocated state. 
+
+However, to move such virtual machine to another subscription, you must disable encryption.
 
 # [Azure CLI](#tab/azure-cli)