provisioners/docker: style nitpick on unless