You give each camera its own token, and validate it with hardware ID.

Even better, give them hardware token, that can sign, but does not leak its keys.

In either way, you can ID the device, and block unsold and confirmed stolen/damaged ones. And never accept traffic from anything else.