Add a scepclient option to specify a CA identifier to fetch certs for