Monitor non-agent hosts behind NAT

I think what you describe is a master - slave setup. I think you can do some tuning on the RaspberryPIs to get it working. You can use a SSH Tunnel to forward Livestatus and Webports.
As second solution you could use a bunch of nagios style checks via check_by_ssh or check_multi


Maybe this helps you. Check_multi can be configured to work/appear as passive checks.