[jddj]

Hmm, is this a recent change?

I mean, I know there have been recent changes in apple's attitude towards enterprise certs, but I've been able to sign internal ad-hoc apps with a developer cert which would last one year (i.e until the provisioning profile expires) with no review.

Granted, you need the unique identifier of the device and it limits you to a certain number per year (100 or 200?), but this still seems different to the situation you are describing.

Fairly sure I did this last year, even. Though admittedly we switched to android at some point, purely because it was too much headache.