Code review comment for ~juliank/grub/+git/bionic:master

Yes, the grub-check-signatures would be nicer with traps, but this is the exact code that's in all other stable series, not introducing regression potential now.