install raca earlier in the provisioning process

* so it's always available