policy violation error when creating intermediate CA with profile intermediate

From #652, when issuing the cli command:

`cfssl sign -ca ca.pem -ca-key ca-key.pem -profile intermediate -config config.json intermediate.csr | cfssljson -bare intermediate`

Still results in the same error "local signer policy disallows issuing CA certificate"

**intermediate config json**

```
{
"signing": {
"default": {
"expiry": 43800h"
},
"profiles": {
"intermediate": {
"usages": [
"signing",
"key encipherment",
"cert sign",
"crl sign"
],
"expiry": "43800h",
"ca_constraint": {
"is_ca": true,
"max_path_len": 0,
"max_path_len_zero": true
}
}
}
}
}
```