provision.sh: add an after init script which adds the user, hacks the bin and chowns the necessary