Hi,
I can provide such system in less than 9 days.
When a push button is pressed (connected to one of the pix32 pins), the pic32 will check if a file is present on usb stick; If yes, it loads it in firmawaere zone.
Of course, code will be encrypted (decryption of bootloader will necessite a sequence of keys)
Contact me back if interested.
Cheers