The whole ssh key redistribution is requiring multiple chef runs anyway. It is probably a minor nuisance that it only works after the 3rd instead of the 2nd run.