provisioner/chef-client: docs and validation key path