I'm facing the same problem.
We have an internal network that has intranet sites accessible and I need the app signed by Enterprise Universal Distribution to query our server directly instead of Apple's CDN. The device does not even have public internet access.
MDM doesn't cut it because our test devices are not managed.