Can’t you load your own keys into your BIOS, letting you sign whatever you want anyway?