* restricted use token cannot generate child tokens

from the Terraform side when Issue a terraform plan I receive one of two errors depending upon where in the cycle the secret_id is

firstly when I have a valid secret_ID

Error: failed to create child token: error making API request … * restricted use token cannot generate child token

if the secret_ID is expired I receive the following error

Error making API request … * Invalid Secret ID

As expected. the has lead me to believe that my terraform config is correct