Fix logstash provisioning

- Ensure /etc/default/logstash is not modified until logstash package is
  installed.

Fixes #143