pki-profiles-ldap: flesh out ldap schema