terraform: validate count is non-negative