A Puppetca Monitor should have the possibility to clean/list/revoke/sign puppet certs and certrequests.
The benefit would be to have a simple interface for people that should be able to add a bunch of new hosts quickly to the system without using auto-sign or the -all option of puppetca.