Add support of provisioning CO Services. ie: When a CO Service is defined/enabled/disabled, an appropriate ProvisioningAction event is sent (via afterSave callbacks, presumably) to an appropriately configured Provisioning Target.
For example, one could configure a MailmanProvisioner, define a Mailman CO Service, then link the service to the provisioner (1-1 initially, maybe 1 service to many provisioners later?) so that the MailmanProvisioner could perform appropriate setup to create an instance of Mailman (or a domain or whatever) for the CO (or COU) associated with the CO Service.
It might also be useful to then reprovision all records into the service, though this could be a good argument for asynchronous provisioning.