Watch this video on YouTube
The destroy provisioner runs only during a destroy operation. Hence, a destroy-time provisioner within a resource will run even if the resource is tainted manually.