The client has a "manual" mode as you describe, but it's practically undocumented right now. It lets you create the certificate on any machine and leaves serving the verification file up to you.

I do hope they polish it up or at least properly document it for the launch.