Patrol MAI: change from behavior CA to side-wide CA

Only side-wide CAs can use the external CAs, and there are some other
changes we want to make as well that require this.