coreos/oneoff: Update one-off image
coreos/oneoff: make provison script legible