Comment 5 for bug 1929471

I could try to test the suggested change...

I understand that I would need to
- generate a key pair
- roll the public key into bios
- build the shim
- sign the shim with the private key
- set a boot entry with the new shim and updater as its parameter
- try to boot via this new boot entry

Is exact procedure documented somewhere? I could not even build the shim binary when I tried..