terraform: first pass at state file upgrades