[blibble]

you'd have to do the signing inside the ccd silicon

(though if you have lots of time/effort/money you could still extract the key)

[AnthonyMouse]

Or attach the inputs on the CCD silicon to something other than the CCD array.