Could each box have a short lived leaf certificate signed by an Apple intermediate/root? Also they could just be signing content at the application layer like

Could each box have a short lived leaf certificate signed by an Apple intermediate/root? Also they could just be signing content at the application layer like APT does, and the transport is plain HTTP.