The provider attempts to remove and re-add each ip address under azurerm_key_vault->network_acls->ip_rules. The API does not allow us to specify IP's as /32 cidrs due to a recent API change by azure.