I believe your option is to define tenant configuration on your router and thus do not force the phones to use the global sip-ua for all connections, you can then have separate tenant class for SIP trunk vs. CME endpoints, for example tenant for SIP provider might be such as:
voice class tenant 1
registrar ipv4:x.x.x.x expires 3600
credentials number xxxx username xxxx password 7 101F5B4A51 realm xxxx
authentication username xxxx password 7 0355095852 realm xxxx
no remote-party-id
retry invite 2
retry response 4
retry register 10
timers trying 1000
timers expires 60000
timers buffer-invite 1000
sip-server ipv4:x.x.x.x
bind control source-interface GigabitEthernet0/0/1
bind media source-interface GigabitEthernet0/0/1
no pass-thru content custom-sdp
snipper of dial-peer
dial-peer voice 20 voip
description service provider
session protocol sipv2
voice-class sip tenant 1