cluster-management: add ca doc

Based on questsions here: https://github.com/coreos/coreos-overlay/issues/327