One thing I suddenly realized: since we now allow /etc/crowbar/provisioner.json, we should actually not overwrite attributes.provisioner.access_keys if it's already set there.