Thank you for your post and welcome to our community!
That is a very interesting question!
Generally speaking, this is unfortunately not natively supported. You could however consider using our offline updating mechanism as a means to a solution. In that case you would have to create a custom application to transmit and receive the update data, which could potentially be transmitted via CAN.
Essentially you should be able to use CAN to get the lockbox data from another device that transmits it. After that the data can be stored in a location, where aktualizr checks for the lockbox, which then in turn updates your system.
You can find some information on offline updates in general at the following page:
For some information on aktualizr you can visit this page: