no need for sudo in provision_command