only execute provisioner once