Application security groups are being removed

Somehow :azurerm_private_endpoint removes application security groups that were associated with azurerm_private_endpoint_application_security_group_association