allow CA entry without support of any cert profiles, this feature is required if a CA will not enroll any certificate but will revocate certificate