I mean... You could make Puppet/Ansible work for that purpose. Since those Chromebooks aren't really "locked", you could build a small modified master image that exposes SSH. From there, you can just use any sysops tool in place of an MDN. A bit clunky, but actually not too much different; you would be writing a lot of config files rather than clicking buttons in a device manager like Microsoft's or Apple's but the result is the same - to attain a certain state on the device :)