SCCM 2012 + USMT + Computer Personal certificates

SCCM, using SSL, want to do XP to 7/8 migrations.  Cert server issues computer authentication certs perfectly, client installs and everything works great... until we try to add USMT into an OS deployment.

USMT apparently migrates the computer certificates, but can't migrate the private key, so the certs are essentially worthless.  Deleting the certs and rebooting or gpupdate /forcing gets it back in, but that defeats the purpose of a zero-touch deployment if I have to touch them.  

So, my question to the experts, is there a way to make USMT correctly migrate the certs, skip those certs, or make OSD delete those certs and request new ones?

I really want to keep it in SSL - I've had some folks tell me to just turn that off, but in our environment that is not an option.

I'm open to any suggestions - thank you all in advance.