RA and CA should become separate modules, so in future it will be possible to deploy them separately. The ultimate goal is to provide:
1) RA interface
2) CA server
3) admin clients: optional WWW client (as is available now) for less secure installation and some command line client for more closed systems.