I can't believe I've never considered this. They really should have a "custom" option in there as well.
Is it possible to do using .mobileconfig profiles maybe?
(Off topic: Is there a specification somewhere on what's possible using .mobileconfig profiles?)