Your team manages a production RDS database with Terraform. During a routine refactor, a colleague accidentally removed the database's configuration, and a subsequent 'terraform apply' nearly destroyed the instance. You want Terraform to hard-fail any plan that would delete this specific database, forcing engineers to consciously edit the configuration before removal. Which lifecycle setting achieves this?