luci-app-ocserv: express PKID in a way that is acceptable by openconnect