That's the issue. If the first-parties don't provide a means to mint canaries you have to mint your own real keys.