This feature would allow to pass the full CSR to modules for verification before signing.

The modules would be able to not only verify the challenges, like it is already possible with the challenge stores, but could check the CN, or some other attributes of the signing request.

One module could implement the policy based autosigning scheme of puppet.