diff --git a/main.tf b/main.tf
index abe2b91..6f1cd8c 100644
--- a/main.tf
+++ b/main.tf
@@ -151,6 +151,10 @@ resource "aws_iam_role" "role" {
     }
   }
 
+  lifecycle {
+    ignore_changes = [tags["boc:tf_module_version"]]
+  }
+
   tags = merge(
     var.tags,
     local.base_tags,
@@ -200,10 +204,11 @@ resource "null_resource" "role_ldif" {
   provisioner "local-exec" {
     command = "echo '${data.template_file.role[0].rendered}' > ${path.root}/setup/${local.role_name}.ldif"
   }
-  provisioner "local-exec" {
-    when    = destroy
-    command = format("rm -f %v/setup/%v.ldif", path.root, self.triggers.name)
-  }
+  # does not work in 0.12
+  #  provisioner "local-exec" {
+  #    when    = destroy
+  #    command = format("rm -f %v/setup/%v.ldif", path.root, self.triggers.name)
+  #  }
   provisioner "local-exec" {
     command = "echo 'Once complete, execute tf-apply again to create LDAP group'"
   }