* Neal Gompa:
I treat Secure Boot purely as a compatibility interface. We need to do just enough to get through the secure boot environment.
Right. It's not even clear to me why we enforce kernel module signatures in Secure Boot mode, and disable a few other kernel features.
Thanks, Florian