readme
embedded ca root certs
don't bug user to add host to known hosts file during provisioning.
disable provisioning for now