Update: terraform refresh is now effectively an alias for:terraform apply -refresh-only -auto-approve.
terraform refresh
terraform apply -refresh-only -auto-approve
This is still dangerous. Read on…