@todo
Set provisioning after we have the device object.
Spelling.
Add activesync_provisioning_check hook.

Allows for forcing a provision value more atomically than
is possible via the permissions interface. E.g., force provisioning
on clients that REQUIRE it, while still not forcing it for other
clients.
CHANGES