> It makes public key pinning hard (impossible?), though.

In this case you don't pin the server's key but the "central" key.