Automatic csr sending
The ACME protocol was designed by the Internet Security Research Group, and is used by Let's Encrypt to sign domain-validation TLS certificates. Since the transport of GRPC is HTTP/2, which uses TLS for encryption and authentication (when enabled) that should be what you want.