I'm in a similar boat, but just have a license key on the machine (committed) and use the maxmind updater to fetch our licensed db. It happens once per provisi

I'm in a similar boat, but just have a license key on the machine (committed) and use the maxmind updater to fetch our licensed db. It happens once per provision, and a cron job to keep it up to date.