Fix: replace incorrect no_cli with no_option flag
    
    The 'no_cli' is not valid flag in parameters scope, so to hide option from
    CLI 'no_option' flag should be used
    
    https://fedorahosted.org/freeipa/ticket/4995
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>