CMP client: fix error response on -csr without private key, also in docs