pki-profiles-ldap: add cli and update upgrade/cloning sections