move things around to minify provisioning
bye gitlab-shell

radically simplify provisioning