Use exact matches in provider not_if checks