Ben,

You can store the key wherever you want (registry, INI, text files).

BTW, you can modify the wupdate.exe to make sure it does not connect to your server if the key does not exist.

Only an application compiled with SetupBuilder 5 can verify a maintenance key.