I tend to favor automated, or at least scripted provisioning... if it can be exercised quickly and easily, it's more likely to be exercised more often, meaning one can be more trusting.