And if they don't, hard fail the reconfigure run.
This is to prevent mismatch in secret variables that could cause silent failure.
cc @ayufan @jnijhof