core: allow hooking around provisioner runs

/cc @fgrehm - :) I think you'll understand.