I know I'm a bit late to the party, but thought I'd add my 2 pence worth
The easiest way I can think of to accompish this, involves utilising the Definition testing element of the LUA:
Just set the Download Schedule that's grabbing the SEPM's defs to "Must Test" as a Test Status. Combine this with a Distribution Schedule to regularly push the same defs to a Production Distribution Centre and you're away. Doing it this way means that no matter how many times the Distribution Schedule runs, unapproved defs will not be deployed (and therefore your SEPM will not be able to see them to grab them).
Then, when you have a set of defs ready to use, just log into the LUA and approve the relevant defs under "Manage Updates". Once approved, the next schdeuled run of the Distribution Schedule will push the approved content to the Production Distribution Centre, where the SEPM's next schdeuled LiveUpdate attempt will see and download the content.
You just need to make sure that your LUA is configured to retain a sufficient backlog of defs for your purposes.