terraform: don't execute provisioners on destroy