Merge "Allow trust agents to run during provisioning" into nyc-dev