Cerberus-Caritas deal includes Catholic escape hatch