If you know the mac address of the computer you could add it to a static mac list and create a rule to allow it to authenticate to install the image.
You can remove the mac address afterwards from the static list.
I would use MDT/pxe boot for that and not bother with a USB drive