The docker-ce package depends on docker-ce-cli unconstrained, this can lead to problems where the cli package is too new to communicate with the daemon. This patch adds an explicit install task for the cli package, so that it's version can be overridden if necessary. Related conjurinc/ops#569