Run carton as part of provisioning, but don't use sudo.