Open
Description
Differences in cli <-> ca versions can lead to removing attributes on CA config overwrite
Suppose certificates has a higher version than cli and thereby has attributes in the config that are not yet available to the cli. If you run a command that overwrites the CA config (e.g. step ca provisioner add|remove), the newer attributes will be removed because they won't be recognized by the cli.
Expected behaviour
One option would be to warn if there are unrecognized attributes in the config (or if the versions of ca and cli are different). Only proceed if a --force flag (or some such thing) is used.