Right now the best way to set something like that up would be with a Config object that overrides CustomCheck.
I’ll try to merge https://github.com/pulumi/pulumi-go-provider/pull/97 soon, which adds direct support for a configure step that doesn’t relate to state.
The credentials example uses a provider config. It should give you somewhere to start.