diff --git a/targets/admins/tf.sh b/targets/admins/tf.sh
index e0f5f53..6f6b89a 100755
--- a/targets/admins/tf.sh
+++ b/targets/admins/tf.sh
@@ -3,7 +3,7 @@ set -euo pipefail
 
 rm -f .terraform.lock.hcl
 if grep -q .sops terraform.tfstate; then
-  sops -i -d terraform.tfstate || true
+  sops -i -d terraform.tfstate
 fi
 cleanup() {
   sops -i -e terraform.tfstate