What degree of determinism do you actually have if provisioners can execute Turing complete code?