add idempotency to easy_rsa recipe