provision/docker: use return instead of fallthrough