docs: def diff_write_only(resource):
          """A different implementation of diff that is
          used for those Vault resources that are write-only
          such as AWS root configs"""
          if resource.present and not resource.existing:
              return ADD
          elif not resource.present and resource.existing:
              return DEL
          elif resource.present and resource.existing:
              return OVERWRITE
  
          return NOOP