core: create sentinel just before provisioning [GH-2488]