With africalass's help, we have a solution for her problem and others like it. The next CC release contains code to check the license once per device. Once the license is confirmed you can set up any restricted accounts on the device to use the admin's license. This scheme also works for non-restricted devices behind firewalls. Before locking down the device the "owner" gets CC to check the license.
And yes, there are ways to break this, in effect pirating the app. However, breaking it isn't obvious and the tools-that-shall-not-be-named already do the job, so this scheme adds user convenience without adding any more risk.
to africalass for testing three iterations of the scheme.
EDIT: this new feature is limited to the Google Play version. It does not work with Amazon licensing.