Please add the ability to create and distribute self-signed PMM certificates in the same way SCCM can do for Windows clients. This would mean we wouldn't have to have a PKI infrastructure and could manage the certificates from within SCCM (the same as I currently do for Windows clients).