provisioner/workflow refactors