The way I envisioned is that the entire thing would be separate from the regular public email system. The collecting device would first deliver it to a local ma

The way I envisioned is that the entire thing would be separate from the regular public email system. The collecting device would first deliver it to a local mailserver, which then in turn delivers it to our mailserver which only accepts TLS connections with a client certificate signed by us.