In case providing text arguments isn’t really a requirement, I went ahead and opened issue cwltool#1963, with a very simple test case.
As I mentioned there, the current behavior of cwltool prevents requesting provenance in Calrissian (CWL on Kubernetes).