provision.sh: use rsync instead of mv to allow multiple runs