Add exclusions from specific distributions, add debian;
Put distribution specific rules before provision rules so bootstrap scripts run first