CHG: split out provision script