improve PKI idempotency & enable auto backup
genericize easy-rsa default attribute