Unless I'm missing something, you have to release the source code to your client, upon which I can simply disable any serial number check... Erm, hello.. your business model is screwed.