Great! Skipping the bootloader was a great idea :-)
The recovery is usually either being called from the button combination or from within the OS. So the initial signup stage, if I understand right what you mean, happens within Android - you sign up there, then it downloads the update.zip and reboots into the recovery (I'm quietly wondering what happens if we place a update.zip on the sdcard and reboot recovery - I like simple solutions). You can browse what the recovery is usually
supposed to do here:
https://github.com/android/platform_recovery
The keys you have there might well simply be signed by victor@vgonzalez-ubuntu or K01.01.20110801 or something else that is automated in the freescale build process, which does it by default. But of course we need to find out if their use is actually enforced. What we (or at least me) want inside the recovery is fastboot (it doesn't seem like it's in there), so we can flash without opening up. Unfortunately, I just checked the freescale recovery and it isn't there either - I'm still trying to find the relevant piece of information on this one.
I wonder if Victor is coming around from time to time, smiling down on us as we are sitting in front of these riddles. :-)
P.S.: *fingers crossed that a distributer has asked for a way one-click solution to recover bricked units...* :-)
P.S.2: Well, they didn't. Back to reading, I guess.