CN should not be required in radiusProfile schema