What are the legal implications of Jailbreaking an iOS device?
You can use a provisioning profile as long as he gets a new provisioning profile before the current one expires.

Apple also has a business store (basically a corporate App Store) but I think that is way over the top for what you are trying to do.

The most legitimate/safe option is to deploy a provisioning file and update it each year…