When using infrastructure-as-code to update settings, if the desired license key matches the current one (same client ID and signature) but differs only in the expiration date, only apply the update if the new key has a later expiry. This prevents accidental downgrades when an older license key is present in the IaC configuration. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>