I'm in a similar boat, but just have a license key on the machine (committed) and use the maxmind updater to fetch our licensed db.

It happens once per provision, and a cron job to keep it up to date.