We have a test gap - there is no test that tests setting `kms_encryption_enabled_bucket` to true, or `enable_vpc_flow_logs` to true