Terraform: self-validating plan-time permissions checks

How can a Terraform configuration test whether it has sufficient access to do its own work?