Various Certificate Authorities, including Puppet, is supported for TLS connections and SSL based user authentication. Authorization and Auditing is set up out of the box and fully functional.