Would be great if we could get an ephemeral version of `consul_acl_token_secret_id` so the secret ID is not stored in the Terraform state.