Also— as this apparently hasn't been mentioned here: https://fedoraproject.org/wiki/Features/SecureBoot and also the actual WIP kernel patches: http://www.codon.org.uk/~mjg59/tmp/ftsoefi/