second seems fine, better the installer be interactive if any secrets or config is needed.