In Vagrant, how to populate provisioning env variable only when actually provisioning?

Question

I\'m setting up a Vagrantfile that needs to put a secret key onto the guest during provisioning. The key is GPG encrypted, and I\'d like to pass it in an environment variable t