PWABuilder does both, either you have it make keys for you and the keys is part of the download package, or you provide your own. This allows basic devs to get their initial keys for first package, then when updating, they have the keys already, no need to install special tools to generate keys. I suggest supporting both, and for those who don't want to share their keys with the service, they run themselves.