w2 does not requests keys from w1 if w1 has not yet published a state update

[clangenb]

While initializing w2 we look for other workers with get_worker_for_shard which returns None if w1 has not yet published a state update, i.e., has not received a request yet.

[brenzi]

reverting my initial point:

I think the logic is sound that we should only request provisioning form workers who have published state updates. So we need to wrap the demo around this rule

This logic can lead to a deadlock: a malicious or careless worker operator could block the bootstrapping of a shard by frontrunning his registration

So actually, it may be safer to request provisioning of secrets anyway