changes in the provisioner to use TLS when talking to the server