Well - you actually can do this with the BES for MDS Apps, but that's because it uses a service account for provisioning and uses the PIN to transport the EA data for that user. One of the main diffs between the MDS BES and normal BES's is that provisioning method. With a normal bes the ea is transported through email ... trying to change this would be quite a rewrite I would assume.