assorted updates
pki-profiles-ldap: add implementation details