pki-profiles-ldap: add implementation plan