EFF's Let's Encrypt initiative is designing a protocl for easy enrollment of TLS certificate from web servers. It may be interesting to support this in EJBCA.
ACME mailing list:
JWT + JOSE Library + dependecy json-smart:
Example of live REST API