I'm away for two weeks from this weekend. I have one outstanding CL in particular that deploys the provisioning agent. The tests are incomplete and it doesn't work currently (oh so close!), but perhaps Dave might like to take it on in the meantime since he's been working closely with the PA https://codereview.appspot.com/6333056/