s4:provision Clarify that we set, rather than modify, objectGUID values