- [new command regenerate-ca-certs](!17) to generate CA certificates before any machines are started; this prevents race conditions where multiple concurrent machine launches generate conflicting CA certificates - by default, the `redhat` provisioner will [not update packages anymore](!16), use --engine-update-packages to enable them again