The current policy is causing trouble with rollouts. This is a proposed fix. We expect that terraform will keep old secret versions around instead of deleting them.
This approach was proposed by @cfeick.
see team#100 (closed)