I have a resource that is always tainted (spurious diff) - how do I go about tracking down if the issue is with pulumi or terraform plugin? Is state diff something that pulumi handles or is it entirely delegated to terraform?