Enabling Flash Encryption, NVS Encryption and Secure Boot remotely without having physical access

[encryptior]

We have our esp32 chip deployed across various regions for some use case and we need to implement security features in them and hence need to enable Flash Encryption, NVS Encryption and Secure Boot V2 in our chip. I have tested these features in a test chip present with me. Is it possible to enable these features over the network somehow, maybe using some OTA firmware deployment which can flash new partition table, bootloader, burn efuses which are required to implement the above security features?
Any help would be appreciated