fixes #5436 - provisioning templates are world accessible