diff --git a/README.md b/README.md
index 0799584..3c97d59 100644
--- a/README.md
+++ b/README.md
@@ -39,7 +39,7 @@ AZDO_PAT='<your-pat>' ./scripts/publish.sh <vsix-path> <publisher-id> <org1> <or
 Example:
 
 ```bash
-AZDO_PAT="$AZDO_PAT" ./scripts/publish.sh ./build/skoszewski-lab.azuredevops-get-oidc-token-task-1.0.0.vsix skoszewski-lab org-a org-b org-c
+AZDO_PAT="$AZDO_PAT" ./scripts/publish.sh ./build/skoszewski-lab.azuredevops-get-oidc-token-task-1.0.3.vsix skoszewski-lab org-a org-b org-c
 ```
 
 ### Manual publish (Web UI)
diff --git a/examples/azure-pipelines-smoke.yml b/examples/azure-pipelines-smoke.yml
index c50cb63..7c7c748 100644
--- a/examples/azure-pipelines-smoke.yml
+++ b/examples/azure-pipelines-smoke.yml
@@ -19,6 +19,7 @@ steps:
         echo "ARM_OIDC_TOKEN is missing"
         exit 1
       fi
+      echo "Token Hash: $(echo -n $ARM_OIDC_TOKEN | sha256sum | awk '{print $1}')"
 
       if [[ -z "${ARM_TENANT_ID:-}" ]]; then
         echo "ARM_TENANT_ID is missing"
@@ -29,13 +30,17 @@ steps:
         echo "ARM_CLIENT_ID is missing"
         exit 1
       fi
+      echo "ARM variables are populated."
+      echo "Tenant: $ARM_TENANT_ID"
+      echo "Client: $ARM_CLIENT_ID"
 
       if [[ -z "${GIT_ACCESS_TOKEN:-}" ]]; then
         echo "GIT_ACCESS_TOKEN is missing"
         exit 1
       fi
+      echo "Git Access Token Hash: $(echo -n $GIT_ACCESS_TOKEN | sha256sum | awk '{print $1}')"
 
-      echo "ARM variables are populated."
-      echo "Tenant: $ARM_TENANT_ID"
-      echo "Client: $ARM_CLIENT_ID"
     displayName: Validate exported variables
+    env:
+      ARM_OIDC_TOKEN: $(ARM_OIDC_TOKEN)
+      GIT_ACCESS_TOKEN: $(GIT_ACCESS_TOKEN)
diff --git a/task/AzureFederatedAuth/task.json b/task/AzureFederatedAuth/task.json
index 4438238..260d720 100644
--- a/task/AzureFederatedAuth/task.json
+++ b/task/AzureFederatedAuth/task.json
@@ -10,7 +10,7 @@
   "version": {
     "Major": 1,
     "Minor": 0,
-    "Patch": 3
+    "Patch": 4
   },
   "instanceNameFormat": "Configure federated auth: $(serviceConnectionARM)",
   "inputs": [
@@ -20,7 +20,7 @@
       "label": "Azure Resource Manager service connection",
       "defaultValue": "",
       "required": true,
-      "helpMarkDown": "AzureRM service connection used to request the OIDC token."
+      "helpMarkDown": "AzureRM service connection used to request the OIDC token. Requires System.AccessToken to be available to the job."
     },
     {
       "name": "setGitAccessToken",
diff --git a/vss-extension.json b/vss-extension.json
index 448d371..82ef04e 100644
--- a/vss-extension.json
+++ b/vss-extension.json
@@ -2,7 +2,7 @@
   "manifestVersion": 1,
   "id": "azuredevops-get-oidc-token-task",
   "name": "Azure DevOps AzureFederatedAuth Task",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "publisher": "skoszewski-lab",
   "targets": [
     {