cluster-management: add ca doc

Based on questsions here:
https://github.com/coreos/coreos-overlay/issues/327