First, forgive me, as I primarily use OSD instead of Provisioning, but i have done some of that playing around with it. If i'm remembering correctly, you follow something like this:
How to create and use a "provisioning agent" for end to end provisioning in LDMS 9.0 SP2 and earlier in which you set the policy sync date way out into the future, such as the year 9999 or whatever.
See if that doc is what you are looking for. Good luck.
You can install an initial agent that has only software distribution (and remote control if you want) at the very beginning of your provisioning, and then at the very end install your full agent with patching et al.
This is what I use:
cmd.exe /c "Taskkill /IM Vulscan.exe /f"