Not allow to provision where there is already one provisioned organization

Also better assertion in guessing names to detect having more than one organization provisioned
I would separate the names using underscore, ie, server_role, dns_domain, domain_dn. It improves clearly the readability.