I don’t think Apple would have much trouble burying a certificate and key in a IOS device that would be very hard to access.