dfppa on_challenge provides unexpected new value

[project0]

dfppa creates incosistent result ending up in a error during apply. I am aware this is not supported configuration, but the validation should then avoid this kind of mistakes.

resource "stytch_b2b_sdk_config" "this" {
  project_id = stytch_project.this.live_project_id
  config = {
    basic = {
      enabled                   = true
      create_new_members        = true
      allow_self_onboarding     = true
      enable_member_permissions = true
      domains                   = var.domains
      bundle_ids                = var.bundle_ids
    }
    sessions = {
      max_session_duration_minutes = 60
    }
    totps = {
      enabled      = false
      create_totps = false
    }
    dfppa = {
      enabled                = "DISABLED"
      on_challenge           = "BLOCK"
      lookup_timeout_seconds = 10
    }
    cookies = {
      http_only = var.http_only
    }
  }
}

│ Error: Provider produced inconsistent result after apply
│ 
│ When applying changes to stytch_b2b_sdk_config.flowers_sbx_sdk_config, provider "provider[\"registry.terraform.io/stytchauth/stytch\"]" produced an unexpected new value: .config.dfppa.on_challenge: was
│ cty.StringVal("BLOCK"), but now cty.StringVal("ALLOW").
│ 
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.