>keep a machine hosted at a company secure from law enforcement

Your own hardware + continuous video monitoring is probably good enough. The idea is not to keep it secure, but to know when a breach has happened.