diff --git a/terraform/user_data.sh.tftpl b/terraform/user_data.sh.tftpl
index a2f8a6c..24b8158 100644
--- a/terraform/user_data.sh.tftpl
+++ b/terraform/user_data.sh.tftpl
@@ -3,7 +3,12 @@ set -euxo pipefail
 
 # Vector: listen on UDP/TCP 514 and IPFIX 2055/2056, parse, ship to Firehose.
 curl -sSL https://setup.vector.dev | bash
-dnf install -y vector
+# First boot races AL2023's rpm lock during Vector GPG import.
+for i in 1 2 3 4 5; do
+  dnf install -y vector && break
+  sleep $((i * 5))
+done
+rpm -q vector
 
 install -d -m 0755 /etc/vector /var/lib/vector
 cat > /etc/vector/vector.yaml <<'VECTOREOF'
diff --git a/terraform/vector.yaml.tftpl b/terraform/vector.yaml.tftpl
index 9b82c63..4adfd52 100644
--- a/terraform/vector.yaml.tftpl
+++ b/terraform/vector.yaml.tftpl
@@ -114,7 +114,7 @@ transforms:
         "dst": null,
         "proto": "ipfix",
         "action": null,
-        "raw": encode_base64(payload) ?? payload
+        "raw": encode_base64(payload)
       }
 
   parse_netflow_locust:
@@ -131,7 +131,7 @@ transforms:
         "dst": null,
         "proto": "ipfix",
         "action": null,
-        "raw": encode_base64(payload) ?? payload
+        "raw": encode_base64(payload)
       }
 
 sinks:
@@ -142,5 +142,7 @@ sinks:
     stream_name: ${firehose_stream}
     encoding:
       codec: json
+    healthcheck:
+      enabled: false
     request:
       timeout_secs: 30