core: allow provisioner cleanup to happen after call