partial implementation of trusted side of provisioning setup, enough to try to load primary's provisioning url