I've imported some resources into Pulumi's state - When I

preview

, some imported resources are showing that they will be updated by a deployment, but there's no actual change shown in details. Is the 'change' in this case the addition of the 'protect' opt into the state and therefore just a metadata change that's safe to deploy with no risk of change to the actual resources? It's not super clear to me via the details given via the cli

~ aws:vpc/securityGroupIngressRule:SecurityGroupIngressRule: (update) :lock:
                    [id=sgr-0db971549459f29c4]
                    [urn=urn:pulumi:prod::main-vpc::pkg:index:Vpc$pkg:index:MainVpcSecurityGroups$aws:ec2/securityGroup:SecurityGroup$aws:vpc/securityGroupIngressRule:SecurityGroupIngressRule::<snip>]
                    [provider=urn:pulumi:prod::main-vpc::pulumi:providers:aws::default_6_36_0::f806bacb-9feb-491a-863e-be6f5e64be54]
                    cidrIpv4       : "10.0.0.0/16"
                    fromPort       : 8080
                    ipProtocol     : "tcp"
                    securityGroupId: "sg-7d549d18"
                    toPort         : 8080