terraform: validation with unknown variables works [GH-432]