The default route on my ASAv in Azure is pointing to the management subnet, even though I don't have that route set in the ASA. As a result, no VPNs will come up.