Don’t call highstate during provisioning as it is then done in sequence.
Get key management setup.