Your team's Azure Machine Learning workspace is configured with a private endpoint and public network access disabled. When you submit a job that references a custom environment defined by a Dockerfile, the environment image build fails because the default build process cannot reach the workspace's container registry over the public network. You need to allow custom environment images to build successfully while keeping the workspace isolated from the public internet. What should you do?