I use the Hammer CLI at AWS in CloudFormation to bring up EC2 instances and assign them roles/environments so that they can bootstrap automagically. During the 'testing' phase of this i sometimes need to bring down and instance and bring it back up again clean. The CLI cannot currently revoke the previous cert, so I have to ssh into my Foreman box and 'puppet cert clean fqdn'. It would be nice for the CLI or the API to have this ability.