Enforce non-destructive update policy by default, requiring override

It's a little too easy to accidentally replace or destroy a resource unintentionally, simply by changing a parameter of an existing stack. This change ensures that you're at least aware of the risks before moving forward with a potentially risky update.