Get and inject credentials needed to provision an instance

Credentials are needed to enroll a machine into an Identity Management
service. The process of generating these credentials needs to be done
synchronously before the instance is created so the generated credentials
are available to both the instance and the provisioning system. This needs
to be done before the instance is booted so enrollment can be done in the
cloud-init first boot so the process can be automated.