Under profiles.<profile>, add the following ECS CA-specific settings.