different provisioning scripts run as root and unprivileged user