s4-provision: Use "state directory" from lp, as it is always set