so that we can extract zip files early and install telegraf.
Also moved disabling Windows defender, to keep it at
the very beginning of provisioning.
Change-Id: I6c2039ebd20e541bdd7d437dd56ccb06a1619a5f
Reviewed-by: Heikki Halmet <heikki.halmet@qt.io>