I don't like the idea of not having my development certificates under control. They should be as secure as the production certs in my opinion. I use PHPKi for that purpose, it's not pretty but easy to setup and it runs in my own environment.