To ensure new sandbox hosts are ready before TF terminates old ones, a provisioner should be added that connects and waits until Docker is ready.