"Phone home" at boot

Hi Guys
I am interested in securing the software on a BBB and wonder if any of you have had any success with running an encrypted file system which has enough smarts to allow a lightweight kernel/ssh to run at boot time before the main kernel boot to allow the device to initiate a secure session to a remote server to obtain the main f/s decryption key?