Fix blanket misuse of authenticate_provision