cfengine provisioning update