FYI - I finally posted an issue to Fleet about the SecureBoot certificates DB that we discussed in office hours a while back. I'll be on office hours this week if anyone has questions on it: