Fix provision autoselect

This PR fixes a bug which causes the CLI to select a provision without any valid certificates in it and try building with it.