I do not let any `terraform apply` commands occur via automation in my org.