only split provenance on ; that are not in (), fixes #23