There are multiple changes incoming, some of them are already being introduced in the latest Puppet releases.
Certificate authority is being rewritten to Clojure and it will be directly executed by Trapperkeeper. This implementation will not use any of the Ruby code, but it will keep backwards compatibility with older versions. Both implementations will be kept in parallel till the new implementation is fully functional. Some of the features expected are as follows:
Management unified in a single command
Improved support to cloud environments, with facilities to make it easier to authorize and remove nodes
CA completely separated from the master, what can help in high availability scenarios
This reimplementation will provide a more efficient and more maintainable service, in the line of most of the changes we'll see in the next releases of Puppet.