Just as a fallback for Live protection, I suggest that an EEPROM be built in to the BIOS so that it cannot connect to Live! (because its already banned, because its a made up EEPROM)
Consequently, it would also boot without an EEPROM?
Would this work?