"Anything else will require very careful coding"

If the following two rules are observed the coding is no different to using auto reload:

1) Make the timer tick interrupt the highest priority in the system.

2) Either do not disable the interrupt at all, or only do so for less than, say, 200 timer clock cycles.