add description of sign-in alias limitations and intended behavior of provisioning script