I saw a patch with UUID/GUID support for serial in CA.. I guess, that solves the main problem, that prevents Puppet CA to be HA-able